[Spacewalk-list] Spacewalk 2.8 - Patching RHEL 6/7 Servers

[Lakshmi Narayana]

Hi All,
I’ve installed Open Spacewalk 2.8 on a RHEL 7 server  and configured
CentOS, Oracle Enterprise Linux 7 and able to patch Servers with out any
issues

I am planning to configure RHEL 6, RHEL 7 servers into Spacewalk so that
all my environment systems patch and administration on single patching
solution

I have done the below configurations but getting the below errors

1. # cp -p /etc/rhsm/ca/redhat-uep.pem
/usr/share/pki/ca-trust-source/anchors/

# update-ca-trust
2.
Red Hat you will need to enter the CA SSL Key, the Customer Entitlement SSL
Key and the
SSL Client Key.  In the redhat.repo file you'll see something like this:

sslcacert = /etc/rhsm/ca/redhat-uep.pem  (the RHEL CA Signing SSL
certificate)
sslclientkey = /etc/pki/entitlement/<a big long number>-key.pem  (RHEL
Client Key SSL certificate)
sslclientcert = /etc/pki/entitlement/<the same big long number as
above>.pem (RHEL Entitlement/Client certificate)

The contents of the sslclientcert file is the key you want to register in
spacewalk as the Red Hat Entitlement Key.   I created my keys with these
names:

RHEL CA Signing Certificate, RHEL Client Key, and RHEL Entitlement.  For
each key you create a key, put in the description, select type SSL and
paste the contents of the appropriate file into the Key contents field

3. Created Redhat 7.6 channel in spacewalk wegUI
For GPG Key ID: FD431D51, and GPG key fingerprint:  567E 347A D004 4ADE
55BA 8A5F 199E 2F91 FD43 1D51
baseurl: https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os
and
in the repository selected CA signing, RHEL client key and rhel entitlement

4.
{root at spacewalk}-{/etc/yum.repos.d} # /usr/bin/spacewalk-repo-sync
--channel linux7-x86_64 --type yum
22:37:57 ======================================
22:37:57 | Channel: linux7-x86_64
22:37:57 ======================================
22:37:57 Sync of channel started.
22:37:57
22:37:57   Processing repository with URL:
https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os
22:37:58 ERROR: failure: repodata/repomd.xml from rhel-7-server-rpms:
[Errno 256] No more mirrors to try.
https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml:
[Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)"
22:37:59 Sync of channel completed in 0:00:01.
22:37:59 Total time: 0:00:01

Please help on this issue.

Thanks,
Lakshmi Mandava


On Wed, Jul 3, 2019 at 11:21 PM Lakshmi Narayana <mandava2020 at gmail.com>
wrote:

> Hi All,
> I’ve installed Open Spacewalk 2.8 on a RHEL 7 server  and configured
> CentOS, Oracle Enterprise Linux 7 and able to patch Servers with out any
> issues
>
> I am planning to configure RHEL 6, RHEL 7 servers into Spacewalk so that
> all my environment systems patch and administration on single patching
> solution
>
> I have done the below configurations but getting the below errors
>
> 1. # cp -p /etc/rhsm/ca/redhat-uep.pem
> /usr/share/pki/ca-trust-source/anchors/
>
> # update-ca-trust
> 2.
> Red Hat you will need to enter the CA SSL Key, the Customer Entitlement
> SSL Key and the
> SSL Client Key.  In the redhat.repo file you'll see something like this:
>
> sslcacert = /etc/rhsm/ca/redhat-uep.pem  (the RHEL CA Signing SSL
> certificate)
> sslclientkey = /etc/pki/entitlement/<a big long number>-key.pem  (RHEL
> Client Key SSL certificate)
> sslclientcert = /etc/pki/entitlement/<the same big long number as
> above>.pem (RHEL Entitlement/Client certificate)
>
> The contents of the sslclientcert file is the key you want to register in
> spacewalk as the Red Hat Entitlement Key.   I created my keys with these
> names:
>
> RHEL CA Signing Certificate, RHEL Client Key, and RHEL Entitlement.  For
> each key you create a key, put in the description, select type SSL and
> paste the contents of the appropriate file into the Key contents field
>
> 3. Created Redhat 7.6 channel in spacewalk wegUI
> For GPG Key ID: FD431D51, and GPG key fingerprint:  567E 347A D004 4ADE
> 55BA 8A5F 199E 2F91 FD43 1D51
> baseurl:
> https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os
> and
> in the repository selected CA signing, RHEL client key and rhel
> entitlement
>
> 4.
> {root at spacewalk}-{/etc/yum.repos.d} # /usr/bin/spacewalk-repo-sync
> --channel linux7-x86_64 --type yum
> 22:37:57 ======================================
> 22:37:57 | Channel: linux7-x86_64
> 22:37:57 ======================================
> 22:37:57 Sync of channel started.
> 22:37:57
> 22:37:57   Processing repository with URL:
> https://cdn.redhat.com/content/dist/rhel/server/7/7.6/$basearch/os
> 22:37:58 ERROR: failure: repodata/repomd.xml from rhel-7-server-rpms:
> [Errno 256] No more mirrors to try.
>
> https://cdn.redhat.com/content/dist/rhel/server/7/7.6/x86_64/os/repodata/repomd.xml:
> [Errno 14] curl#77 - "Problem with the SSL CA cert (path? access rights?)"
> 22:37:59 Sync of channel completed in 0:00:01.
> 22:37:59 Total time: 0:00:01
>
> Please help on this issue.
>
> Thanks,
> Lakshmi Mandava
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20190710/8629e1a6/attachment.htm>